skysight-inc/HackerNews huggingface dataset:
Uhhh the free version of passwordless technology is called “webauthn”
GitLab end $4/month Starter/Bronze subscription level
Top no-code tools for developers in 2021
> Then we looked at it, and with a few changes in indexes and query hints brought it down to sub-second execution.

This is exactly what the parent comment said: "you should try to build your application so queries and transactions are very short".

If you're claiming that the parent is incorrect about "sometimes, the only answer is to distribute the queries across other boxes", my guess is that probably don't work at a scale where you've learned that query optimization can't solve every database performance problem.
Who is giving out free hardware wallets? I'd like one.
The closest I could find was a reference in the WSJ that said that Gates told them they needed a manufacturing partner which makes sense if you want to get vaccines manufactured and in people’s arms. Doesn’t seem like a nefarious acknowledgement to me at least.

www.wsj.com/amp/articles/oxford-developed-covid-vaccine-then-scholars-clashed-over-money-11603300412
You can do all sorts of realtime audio in the browser! Especially now that audio worklets are a thing.
I'm not sure why that got down voted. I kinda suspect the threshold for a given story and turning a comment grey is pretty low. That plus the horrible habit the internet has of down voting people who are 'wrong' is a bad combo.
Guns are the tools used to kill humans, yes. You will notice that guns don’t appear on the linked page, while humans do.
Is winning an Oscar or being a mainstream hit the threshold for Netflix carrying a documentary?

Anyone can look at the catalog and see that's obviously not the case.

Setting the goal posts there while ignoring the obvious politics around the situation is simply naive.
I can't seem to stream this in my country, and the entire series is not available on physical media.

Ten years ago, I would have been able to buy this show on physical media from abroad. Now, if no streaming provider purchased the television show rights, I can't get it. And there's not enough purchasing power to produce a physical version of it. Isn't this globalization in reverse?

For the record: I live in Norway. Please let me know if there is any way to see the series.
LocalCDN is an extension I would recommend, both for privacy and performance reasons.

https://www.localcdn.org/
Ah, thanks, I hadn't realized that's the underlying library! Runtime validation of types is absolutely the largest missing feature from TypeScript, IMO, so Pydantic is really impressive to me.
> What happens after the inevitable next Purge?

Most authors are not going to be "purged" full stop.
I was hoping this would be a list of the oldest -active- libraries, does anyone have a list of those? This is the best I could find: https://alltimelists.com/10-oldest-libraries-world/
It should not matter if they're following the law. Failure to access some API doesn't mean the user consented.

Like the sibling poster said, the default should be opt-out.

It's not as if this TrustArc modal is some old product that was repurposed for GDPR. This is all planned and done in bad faith, period. It's a dark pattern.
It can be done only after the user confirms, that they want to allow the website to do it (similar to a webcam access, etc).
Check out M Disc: https://mdisc.com/
I'm not sure every claim is worthy of debate. Setting aside all the private investment and philanthropy dollars going towards a cure, governments spend billions annually on HIV research.
They listed those three as examples of languages that don't take good advantage of having static typing.
That's not a natural law, it is just something society decided (or even just interpreted) to be that way. If you dont see the risk on this, you will have to explain to me how political movements which promote a strong redistribution of wealth, more restriction on powerful entities, and pacifism are going to maintain their voice in a world every day more in the hands of big conglomerates. It is not only Facebook or Twitter, now Visa can fuck you over, or one of those airline alliances or Uber or your bank. People must fight back vigorously and if that means to support the right of some groups to say unsavory things so be it.
I don't have stats, but Biktarvy has been advertised for PReP lately. Descovy is approved by the FDA for such use. The shot is around the same price (at list anyway) as some of the other treatments, so if it's even equally effective the convenience might win.
Handling unwanted thoughts that derail your focus
"sovereignty over their digital existence" is a very interesting statement. IMO the problem we have now is that the digital real estate is artificially restricted, by hosting companies, platforms, etc. that it's almost impossible to have sovereignty over your digital existence. If you make the wrong person/group/ideology mad, they will usurp any sovereignty you thought you had. Whereas in the real world, sovereignty is generally limited by land.
I have a primary care physician who I can book online to see usually within a few days, or if I choose one of the other oncall doctors I can see them same or next day.

I recently had a referral to a specialist for a non-emergency exam that was scheduled out two months. When I've had an emergency I've gone to the hospital and been seen within a few minutes to a couple of hours depending on the issue.

I would say I am fairly satisfied with the access I get, and I'm especially happy that I never have to worry about being denied coverage, or ending up "out of network", or having different levels of coverage depending on my employment.
https://youtu.be/rvYuoWyk8iU : almost 40 years ago, Sir Humphrey explains the EEC(EU)..from Yes, Minister.
Tips/micropayments are bad customer experiences. From Stratechery (multi-line quote):

-----------

I am instinctually skeptical of micropayments for a whole host of reasons:

- First, you have to have attach a payment method; it is hard to overcome that level of friction for just a few cents

- Secondly, if said payment method is a credit card, you need to deal with the fact the fees on a credit card transaction start around $0.29

- Third, there is the psychological burden imposed on customers who need to continually choose whether or not to make a purchase

To date the only sort of business that has succeeded with micropayments are free-to-play games: the App Store supplies the payment method (and eats the credit card fees), most games obfuscate the money spent (by selling in-game currency), and even then the strategy succeeds by hooking a small number of “whales” who play the game compulsively; most never pay.

This, in my estimation, would never work for a newspaper or magazine: there is too much competition when it comes to content, the price of any one piece couldn’t be priced high enough to overcome fees, and getting people to pay is hard. Moreover, while a subscription model caps the amount of revenue you earn per customer, it also reduces the likelihood said customer will explore alternatives: it is set and forget, while a micropayment asks for consideration every single time.

-----------

https://stratechery.com/2016/blendle-launches-in-the-u-s-an-... (paywalled)
Couldn't this be done based on content, without looking at personal data? "Here is an article on investment. How about I show an ad of an investment bank."

If only one company does it, they lose. But if everyone is forced to do it, noone will lose.
I found a similar paradox, I'm not religious but I find the notion that humans have been created in God's image to have parallels in the way that we are currently pursuing AI.

The corollary to the is that we randomly evolved of billions of years and our thinking has become so complex that we believe that we can create something that is similarly complex is very fascinating. Fetish is definitely the right word.

The notion that the AI or robots would wake up and have selfish views similar to man's makes sense to us. I wonder how long it will be before the AI or robots is simulating its own creation in their own image...
They are incongruous with how I see most people using twitter. If I wanted the fleet, I would follow them on instagram.
Why does the number of users matter? There will always be a most popular platform, but this is just the natural result of individual choices, nobody is forcing anyone to use any particular platform and almost everyone uses multiple platforms.
Easy fix, on side streets erect bike racks that use up car spaces. You can park 8 or more bikes in a car space. You lose meter $$ from cars - not sure if bikes would pay a fee unless you had the fully enclosed, hard sided bike boxes that would keep an expensive e-bike safe. Locks? Some sort of unhackable app based lock?? I have seen prototypes online, but will they succeed in the open market and also prove to be unhackable?
Easy counterexample: most of the computers worldwide run Linux kernel, which is written in C, and kernel exploits, especially those that are accessible from the web, are significantly rarer compared to the higher level exploits in CRUD APIs or LAMP stacks that work on the http protocol level and the authentication state machines.

This argument doesn't make sense. Yes, programmers make mistakes. Yes, they shouldn't make those mistakes. My point is that its not difficult to write safe C code if you follow some basic rules.
Yep. This meeting is to first organize a team and get everyone on the same page. From there we can start working out the details of building.
There are plenty of researchers who would find a cure if it was possible. HIV integrates into the DNA of the cells it infects, and is virtually impossible to detect and remove completely.
Pretty sure that most newspapers that charge for subscriptions also sell ads. Similarly with TV news channels.
The physical layout of the transmission system is basically impossible to obscure, but does not necessarily give the attacker insight into power flows. Having access to real time power flow data would enable an attacker to design a cascading failure scenario, making an attack MUCH more effective. The last component would be knowing operational response procedures. Which seem to be fairly transparent in Europe? If so I'm surprised more care isn't taken to secure them.
>I agree with you _but_ i don't think CentOS would have survived if not for the redhat acquisition

Based on what? I just went digging through the archives (granted I only spent ~10 minutes) because that's not at all how I remember it, and nothing indicates the CentOS team were facing insurmountable financial hardship or asking the community for more support. Either as part of the acquisition announcement or in the months prior to it.

https://lwn.net/Articles/579551/

https://redmonk.com/dberkholz/2014/01/10/red-hats-centos-acq...
> Hanging chads, over/under-votes, etc.

These were limitations that existed in the equipment in the time. (The uncountable ballot rate in newer optical scanners is vastly lower.) It only became a “concern” because of Gore’s hand recount strategy. (And burning a ton of time pursing the selective recount, which the Florida Supreme Court put a stop to.)

The fact is that with a 1-2% error rate, you can’t reliably “measure” an election result that’s within a tenth of a percent. The whole attempt to recount spoiled ballots was gamesmanship on Gore’s part. (Permissible under Florida law, which was written by idiots, but gamesmanship nonetheless.)
Did it look like this?

https://www.researchgate.net/figure/Energy-trade-change-in-t...

Seems like they're referring to it but also the comments suggest the data was from simulation of optimal market exchange, not actual electrical flows
It's good to see articles on new drugs include pricing information.
AMD Threadripper Pro Retail Pricing Listed: $6k for 64 Cores, $3k for 32 Cores
How do you configure this? I assume I need to create a catch-all alias for this to work. I added *@domain.tld but when I send an email to test@user.domain.tld, it bounces.
> you don't want to be throwing `eval` in your code

Unless you have generated the JS code yourself, in which case it is safe.

What kind of perf are you getting with QuickJS? If you have to evaluate an expression 10,000 times is QuickJS at least half as quick as eval?
Wait, just to be sure. I just realized ... Would your idea have been to allow the extra hospital capacity to be filled up?

Eh, probably not.

You'd know that some people who are hospitalized also die.

Also; knowing the difficulty of trying to deal with an exponential curve, how would you be sure to cut off at just the right time, before people start dying in the streets?

Ok, no, that can't be it. I don't think people are monsters, so you're unlikely to be one :-) .
It's been pretty amazing since the start of the Quantum project. At least since FF70.

I also switched to Chrome rims ago when it came out due to how buttery smooth it was, but switched back after it starter to get slow.

Chrome's a memory hog and it runs slow and clunky on older devices, in my experience.
Robota means different thing in czech than rabota in other slavic languages. Czech robota means corvee. There are different words for corvee in other slavic languages - "barshhina" (in russian), "panshhina" (in ukranian, polish and belarusian, spelled a bit differently in each), and rabota in them means any work, in czech work is called prace.

Edit:
This is a good example of "false friends of a translator" - words in different languages that sound similar but have different meanings. https://en.wikipedia.org/wiki/False_friend

That said rabota and robota still have a common root which means slave in most slavic languages. So how is it the czech is such an outlier is a curiosity.
Malice is very often the product of incompetence in such power structures.
Yup.

The really frustrating thing about this bit is that because it disables optimizations, it potentially impacts sites where they don't actually use tracking.
East Coast Internet Outage
Anyone else noticing a widespread internet outage on the East Coast of the US?
Amazon Glacier
I believe it’s a cornerstone of rational thinking to be able to accept that I don’t know something. To, when confronted with something like this, think only “I don’t understand that”, not “I don’t understand that, therefore I’m going to assume my guess about it is right.”
How long is a few years? What would be a good recommendation for decades? Time goes fast!
Do you use the Fenvi bluetooth adaptor or an Bluetooth chip pulled from a genuine Mac? The fenvi adaptor in my experience is bad, it have high interference.
Please see
https://news.ycombinator.com/newsfaq.html
Algorithms are helping to transform the CX business model
I whole heartedly agree. As a sci-fi nut who has consumed vast reams of the stuff from the 1940s onward, reality pales.

Firefly, I thought, rather neatly sidestepped the FTL issue by putting everything in one vast solar system wherein even the moons had been terraformed (although that itself is a technology that is equally ... unlikely, although for different reasons). I've read not too many series wherein the absence of FTL was acknowledged.

Sometimes reality just doesn't live up to the hype.
That's my impression too. Not surprising though - Firefox has just recently started to get good again (trackpad support, GPU rendering, privacy protections etc), while Chrome gets progressively worse.
SSD's are not as bad as they used to be, but still not rated for long term unpowered storage. HDD would be better for that.

But HDD isn't your only other option. How important is the data, How often will you need to access it, and will you need to rewrite to the storage medium? You might want to consider Blu Ray. Or both, stored in different locations. Also look into LTO tape drives. LTO 6 drives should be cheaper than 7/8 (though still not cheap) and have a capacity around 6TB.
In a parallel reality:

"Firefox 85 Cracks Down on Fingerprinting"

"Is this really important given that supercookies can almost always persist between sessions and across domains?"

----

If you want to fix a problem, there are going to be points during that process where the problem is partially fixed. This only becomes an issue if we're headed in the wrong direction, or focusing on a sub-problem that would be better addressed in a different way, or if we have no plans to fix the other attack vectors.

But the steps we'll take to attack fingerprinting are very similar to the steps we'll take to attack supercookies, so there's no harm in grabbing the low-hanging fruit first.

Supercookies clearly have some value to advertisers and other bad actors or else they wouldn't be used. There's value in closing off that specific tracking method while we continue to try and figure out the harder problem of how to standardize headers, resource loading, etc...
I am not who you were responding to, but I think playing poker would create entertainment (even for the loser) which could be considered something of value.
*A third of Americans don't vote
Bombardier Aviation (planes) and Transport (trains) have been distinct since the 80's. The business jets have been tremendously profitable.

Train is a different market. Rail projects are a political nightmare, as every buyer is a government (municipal, state, national) and wants their rail equipment to be manufactured in their jurisdiction. So they can make a big announcement that the X millions they just paid is actually creating good jobs. Then a few years later the job dries up for a designated site (project completed) so the local government keeps bailing it out else they'll get voted out for getting rid of all these jobs!

Plus, of course, every project is custom hardware. And is long enough that it will span at least two municipal, state or national administrations so expect a feature creep/change of requirements in the middle.
I run a network ad-block dns (pihole) and consistently 25-33% of all my network traffic is blocked as ads. It's much more than I ever imagined. Now I'm used to a different internet, when I'm using internet off the network it's like WTF is this?
Sounds like they have yet to implement the proverbial last 20% of features which is going to take 80% of development time.

> Well, it can render and interact with Gmail quite well. It’s pretty much perfect on a few sites we’ve targeted as focuses during development, but it struggles with many others.
you aren't a data point in a statistic model

i haven't said that you should snore cocaine all day and die. i've just said that it doesn't make sense to optimise every bit.

drink water, do some sports, visit your doctor etc. that will let you have plenty of time, but apply the pareto principle there or like I said, you'll end up wasting your whole life trying to have some edge over other people and such thing do not exist, as you'll die no matter what do you do.

and it would be such a waste to live forever.
IMHO, the only solution is a fairly complicated decentralized structure with economic incentives for all.
That's actually perfectly fine for Google, it'll just come through an intermediary such as a PAC, or trade association. Politicians know where the money is coming from - it's too dangerous not too - and lobbyists will make sure they do. My husband is a former lobbyist and he often had to be the intermediary between group A with the money, group B with the good reputation that handled the movement of that money, and the Politician. What Google is saying sounds nice in the news, but it doesn't actually change a thing IMO.
If you are going to allocate sharded databases per client with identical schemas, might as well give each of them an sqlite database? Since you're massively cutting down the writes if it's one database per customer.
Stitch is partially open as stitch - many of the integrations they list on their website are hosted versions of OSS singer, but a couple are not OSS.

I'm not sure how Stitch's acquisition will affect Singer contributions and such going forward.

Also, Singer has no UI, it's all CLI.
A apolitical organization has even fewer chances, because it then does not readily make an ally to any incumbents.

Newly independent countries are used to seek patronage from major powers (the West, Russia, China, the Muslim world) immediately, because running a new country, usually after a war for independence, is very hard, you lack resources badly. Also, not being patronized by anyone and having tense relations with everyone may mean that a "peacekeeping force" by incumbents will be deployed to prevent the separatists to gain independence.
Native speaker here, you are absolutely right. Work in Czech would be "práce", "robota" means forced work. It is not used as much nowadays since we do not live in a feudal society anymore though :)
> You don't need to check against every single value

I said prove for every value, not check every value.

> first is that anything that is expected to be positive should be unsigned integer and secondly, when you parse the string, you fail to check against max integer value.

I wasn't necessarily confining myself to input validation when talking about integer overflow, there are other places and ways it can be caused, and other vulnerabilities in systems than pure invalid input. Maybe I pass perfectly valid input that causes a small bug somewhere deep inside your system to behave weirdly. The point is it's not as simple as "I validate my input and everything's fine".

> Then validate unicode, lol.

That's the point I was making there, you can't just validate ascii these days, and validating unicode's not as trivial as you're making out, plus you now have a unicode parser which may contain any of these problems too.

> Furthermore you design your code not to support unicode

I think your ideas are about two decades out of date here. There's more to the world than ascii and there has been for a long time.

> Based on what, an opinion of some programmers?

Based on where exploits happen and how bad they are.

> But Im not really concerned with distribution of skill within the modern programmers, Im more interested in the assumption that it is hard to write safe C code in comparison to other languages,

Do you not see the inherent contradiction in the way you've stated that? "It doesn't matter if most people can't do it, that doesn't make it difficult"

Plus, you've told us yourself, there are a ton of extra tools and techniques needed to even attempt to make 'safe' code in C compared to other languages where these classes of errors are just impossible by design. Does this not say "harder to make safe" to you?

> and learning that is beyond reach of most people.

The point in the article is that it's quite likely beyond basically everyone, and this is the conclusion a C programmer has come to after 25 years of bitter experience.
I like how the article starts with the metrics of what a single node can already do. The trend appears to be to scale right at the start, even before you have your first real customer ... the implications and results are obvious.
What other domain(s) are they setting cookies on? I'm not seeing any (but I am not logged in).
It's purely the math probabilities I was getting at above. If you take the number of molecules in a large swimming pool, that is the same number of 50-long RNA molecules it would take to statistically cause at least one RNA to accidentally have any specific pattern of length 50.

In actual evolution this number of RNA molecules can be thought of as 'diluted' across the entire oceans, and not magically sitting in single pond.
What are you trying to say? It's definitely possible, I even gave a link: https://www.beepbox.co

The problem is can we do this using a higher level library instead of sending sound waves to sound driver.
Why not b2 or glacier since you're encrypting anyway? If you don't have that much data then maybe M-DISC?

Personally I think safe is.. unnecessary. What is it protecting you from when your data is encrypted? If you put it in a safe then you probably care enough about the data not to have it in a single location no matter how secure it seemingly is.